Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/1BF4F8CC187E11F1BA032D93DAE4EC9C.roa
File: 1BF4F8CC187E11F1BA032D93DAE4EC9C.roa (raw, json)
Hash identifier: zXtWle/yOTpKwLGIe5XmsNFjkXiS/vvqgdWG5YsQ/bE=
Subject key identifier: 47:44:4D:0A:5C:E4:9A:F5:A6:90:FD:0D:00:10:9B:D0:D8:FC:0E:E9
Certificate issuer: /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial: 08EC
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/1BF4F8CC187E11F1BA032D93DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 10:28:54 +0000
ROA not before: Thu 05 Mar 2026 10:28:50 +0000
ROA not after: Fri 05 Mar 2027 10:28:50 +0000
asID: 60171
IP address blocks: 102.177.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 01:54:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2284 (0x8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Validity
Not Before: Mar 5 10:28:50 2026 GMT
Not After : Mar 5 10:28:50 2027 GMT
Subject: CN=69a95ae6-ece3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:ff:28:87:00:82:bb:8c:13:3f:59:cb:b4:
79:9d:87:28:8d:25:61:a6:26:e1:96:5d:92:46:68:
da:a0:c1:da:0c:d0:91:eb:94:d3:31:96:7f:7a:37:
10:f1:3d:a5:5b:53:75:06:25:6f:47:8f:5a:45:d1:
16:75:04:7f:0e:61:bd:1f:6e:44:99:ee:8e:bd:6e:
90:c9:1e:1c:37:a0:74:9c:e5:34:c1:51:cf:0f:bd:
8b:dd:d3:f6:cb:8f:ad:78:92:4e:53:25:89:45:bd:
db:79:31:f1:63:c6:f6:ce:5a:c1:e4:5b:03:36:3e:
6b:34:3e:4c:a1:c3:26:96:c3:23:bb:ce:4d:58:1d:
d2:53:40:be:bf:69:93:04:5e:26:6c:a0:1f:52:2e:
b7:ca:8e:2a:e3:e2:3f:bd:ce:e0:f6:e2:9f:37:51:
cc:48:4d:36:97:13:32:09:3f:cd:ca:38:69:ca:33:
4d:6f:f6:28:2c:c7:23:02:28:2d:26:f4:dd:62:76:
ff:f6:49:2a:5f:30:6e:cd:2e:b3:8e:a0:46:52:8f:
a5:0a:6f:a1:d8:64:13:81:44:cf:73:f6:e2:f4:b8:
71:3b:7c:d5:37:bd:4d:9c:5f:89:f5:c8:e0:b5:93:
71:23:ba:a7:bc:11:db:9a:8f:98:55:c3:7a:e2:3a:
82:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:44:4D:0A:5C:E4:9A:F5:A6:90:FD:0D:00:10:9B:D0:D8:FC:0E:E9
X509v3 Authority Key Identifier:
keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/1BF4F8CC187E11F1BA032D93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.177.140.0/24
Signature Algorithm: sha256WithRSAEncryption
51:54:cf:df:a8:f4:1b:12:b5:e3:7a:ff:74:83:96:d0:98:64:
32:51:e2:18:04:20:77:27:03:7f:51:75:4f:07:45:08:99:7f:
0e:b2:f1:41:e7:83:46:95:5e:c8:4d:d4:94:bd:a0:7a:6f:ad:
63:7b:c1:1e:f9:64:37:4c:04:56:81:26:c3:53:80:ce:03:34:
1d:b1:e8:5b:32:bd:ad:ab:c7:20:85:14:91:bb:75:10:d8:ae:
db:b9:c0:5a:42:d4:10:16:84:41:0e:9f:da:97:a7:7d:3e:fb:
43:a7:8c:02:fe:ab:8c:1f:35:dc:5e:e1:15:73:ca:26:27:d3:
2c:60:12:af:b0:10:fb:8c:0e:75:04:6f:bd:23:da:7f:40:81:
64:39:4b:88:22:0d:e2:64:6e:22:e5:dd:9c:57:ab:76:ab:db:
63:78:31:db:2e:f2:23:30:bd:88:94:40:fc:8d:4f:27:8d:91:
c5:a3:64:35:6d:b7:69:5a:9b:7d:ab:2d:bf:39:ec:bf:36:db:
ff:46:59:f1:b7:d0:75:eb:71:93:28:c5:5e:5a:41:3f:06:fa:
42:80:88:ef:e2:43:3d:26:f8:20:9c:69:c3:69:8c:1f:ff:f5:
91:f0:f6:65:de:8d:21:4e:eb:af:8c:16:25:a7:fa:aa:ca:7c:
7a:4f:69:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:22:40 2026 by rpki-client